Hi Luigi

squid3 in stable is still affected by #696187: cachemgr.cgi denial of
service.

Could you prepare an upload for CVE-2012-5643 and subsequent
CVE-2013-0189 targeting stable-security for a DSA?

Note that the initial patch was incomplete and the full fix is at [1].

 [1]: http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2012_1.patch

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to